Hacker News Reader

Not so much a faulty DNSSEC protocol but a misuse of DoH embedded maliciously within applications.

This vector has always existed - all that changed is RFC 8484 defines a standard way of doing this.